import { type CredentialMigrationSource } from "./credential-migration-source.ts";
export type CredentialMigrationDiscoveryErrorCode = "discovery_cancelled" | "discovery_unavailable";
export declare class CredentialMigrationDiscoveryError extends Error {
    readonly code: CredentialMigrationDiscoveryErrorCode;
    constructor(code: CredentialMigrationDiscoveryErrorCode, message: string);
}
export interface CredentialMigrationSourceCandidate {
    source: CredentialMigrationSource;
    variableNames: string[];
}
export interface CredentialMigrationDiscoveryResult {
    candidates: CredentialMigrationSourceCandidate[];
    skipped: number;
    truncated: boolean;
}
export type CredentialMigrationSourceDiscoverer = (cwd: string, signal?: AbortSignal) => Promise<CredentialMigrationDiscoveryResult>;
export interface CredentialMigrationDiscoveryOptions {
    additionalRoots?: readonly string[];
    excludedFiles?: readonly string[];
}
/**
 * Discover supported credential sources without returning their values. The scan is deliberately
 * bounded to the current working tree, explicit machine roots, and the current process environment.
 * It never follows symlinks and skips dependency/build trees, dotenv templates, and store bootstraps.
 */
export declare function discoverCredentialMigrationSources(cwd: string, signal?: AbortSignal, environment?: NodeJS.ProcessEnv, options?: CredentialMigrationDiscoveryOptions): Promise<CredentialMigrationDiscoveryResult>;
//# sourceMappingURL=credential-source-discovery.d.ts.map